Comment by tatref

That's why on some configurations (RHEL 7 I think), journald will happily fill up your ram via /run/